Cybersecurity Risk Analyst

Responsibilities

The Cybersecurity Risk Analyst will perform IT risk assessments and audits, articulating technical risks in terms of business impact, identify critical risks and issues, develop contingency plans, and escalate unresolved matters to senior management. They will manage risk register items by assigning ownership, tracking progress, and driving remediation efforts, manage the lifecycle of all risk acceptances and policy exceptions, facilitate planning, execution, and reporting of risk assessments and audits to support compliance with security frameworks (CIS, HIPAA, NIST, ISO), assist in the day-to-day management of the IT GRC program, identify opportunities for improvement in existing processes and controls, build and manage GRC frameworks and processes, develop vendor assessment standards and processes for third-party technology vendors, participate in cybersecurity incident response activities, assess the impact of incidents and initiate appropriate remediation measures, conduct internal and external audits and assessments to verify adherence to security controls, and generate regular reports on the organization’s risk posture and security status.